Unable to start Splunkweb on Server: RedHat 6.4.

[edrivera3]

Hi,

Server: RedHat 6.4

Splunk was installed successfully, but I cannot access Splunk web server through a web browser. I changed the port, but it didn't make any change.

Edit:
I changed the port to a different one and now it is working. Not sure what was wrong with the previous ports I tried.

Thanks for the help.

[tlelle_splunk]

I assume the data center uses a firewall, do you have the proper port open for splunk web?

[tlelle_splunk]

Try running the following command to ensure you're using the correct port:
./splunk show web-port

Also check /splunk/etc/system/local/web.conf to see if there are any discrepancies.

[edrivera3]

$./splunk show web-port
Splunk username: XXXX
Password:
Web port: 8003

web.conf:
[settings]
httpport = 8003

[tlelle_splunk]

Is this a local machine or is it hosted in a cloud environment?

[suryabarath]

I have installed on a amazon ec2 instance, I dont see a /splunk/etc/system/local/web.conf file. How can I use start the splunkweb? Thanks

[tlelle_splunk]

Have you opened up port 8000 in an EC2 Security group? Splunk automatically enables splunkweb, so you shouldn't have the need to create a web.conf file.

[edrivera3]

It is a virtual machine and it is hosted in a Data Center.

[tlelle_splunk]

Scratch that, saw your edit. Good stuff.

[richgalloway]

Is splunkweb running? It may have stopped if there was a port conflict. Run ./splunk status to find out if it's running.

[edrivera3]

$ ./splunk status
splunkd is running (PID: 21796).
splunk helpers are running (PIDs: 27197 ... .... .... ).